COVID-19 pandemic reveals major gaps in privacy law, says watchdog

As it pushes more and more Canadians online to work and shop, the COVID-19 pandemic is demonstrating the need for better laws on data use and privacy, the country's privacy watchdog warned MPs today.

Privacy Commissioner Daniel Therrien says sensitive information is often discussed via videoconferencing

Canada's privacy watchdog is raising concerns about the data collected on teleconferencing technology including for work, school and telemedicine. (Juliya Shangarey/Shutterstock)

As it pushes more and more Canadians online to work and shop, the COVID-19 pandemic is demonstrating the need for better laws on data use and privacy, the country's privacy watchdog warned the federal government today.

"This year, the COVID-19 pandemic makes the significant gaps in our legislative framework all the more striking," wrote Privacy Commissioner Daniel Therrien in his annual report, tabled in Parliament today.

"With the pandemic accelerating the digitization of just about every aspect of our lives, the future we have long been urging the government to prepare for has arrived in a sudden, dramatic fashion. This rapid societal transformation is taking place without the proper legislative framework to guide decisions and protect fundamental rights."

Therrien said most interactions taking place online now — such as remote work, socializing with friends, logging into school or discussing health issues with a doctor —  use commercial videoconferencing technology.

The situation comes with risks, he said — of commercial enterprises collecting exchanges between doctors and patients, for example, or of e-learning platforms capturing sensitive information about students' learning difficulties or behaviour.

"Do you want your conversations with your doctors to be available to companies and used in a profile that will affect your future life? No. Obviously, the answer is no," Therrien said.

"Do we want the information of our children to be collected by companies for purposes that have nothing to do with education, and used to build profiles and used for commercial purposes? Again, the answer is no."

Therrien said his office hasn't investigated companies based on those risks yet, but added Canada needs laws that set limits on permissible uses of data and that do not rely "on the good will of companies to act responsibly."

Push for more enforcement powers

He also said the pandemic has stirred up heated debates about privacy, including questions about the government's contact tracing app (on which Therrien was consulted) and about Canadians being asked for personal health information or required to undergo temperature checks at airports or before entering workplaces and stores.

Privacy Commissioner Daniel Therrien tabled his annual report in Parliament today. In it, he called for laws that set limits on permissible uses of data so Canadians are not left to rely 'on the good will of companies to act responsibly' when it comes to protecting their privacy. (Adrian Wyld/The Canadian Press)

The privacy commissioner's office has long argued for enforcement powers to go after those who violate Canadians' privacy — including the ability to make binding orders and impose consequential administrative penalties for non-compliance with the law.

His office is also asking the federal government to define privacy as a human right.

Therrien said he hasn't seen much movement on the issue in government.

"I've had discussions with about half a dozen federal ministers who obviously were sympathetic to the arguments that I was putting forward. But we still don't have a law," he said.

"The short answer is I don't know when the government will table privacy legislation. I see that a number of provinces apparently are getting weary of inaction by the federal government and are starting to act."

Add some “good” to your morning and evening.

A variety of newsletters you'll love, delivered straight to you.

Sign up now


To encourage thoughtful and respectful conversations, first and last names will appear with each submission to CBC/Radio-Canada's online communities (except in children and youth-oriented communities). Pseudonyms will no longer be permitted.

By submitting a comment, you accept that CBC has the right to reproduce and publish that comment in whole or in part, in any manner CBC chooses. Please note that CBC does not endorse the opinions expressed in comments. Comments on this story are moderated according to our Submission Guidelines. Comments are welcome while open. We reserve the right to close comments at any time.

Become a CBC Member

Join the conversation  Create account

Already have an account?